Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134342e302f32312d3231203d3e203532383631.roa
File:                     3137372e39332e3134342e302f32312d3231203d3e203532383631.roa (raw, json)
Hash identifier:          RRarGKrrHN5AjeXnp13kE3eazfRbIriyRS0si43UzBI=
Subject key identifier:   1B:36:BD:6C:FC:1A:DC:38:41:6E:D5:9C:67:C0:DF:5C:DF:0B:0A:5D
Certificate issuer:       /CN=836BA4893066A2B7B112A0DB316F1611FD005A58
Certificate serial:       54EB4A2D40848068B5CA562AAD60D2496BB457D8
Authority key identifier: 83:6B:A4:89:30:66:A2:B7:B1:12:A0:DB:31:6F:16:11:FD:00:5A:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/836BA4893066A2B7B112A0DB316F1611FD005A58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134342e302f32312d3231203d3e203532383631.roa
Signing time:             Fri 01 Mar 2024 14:20:38 +0000
ROA not before:           Fri 01 Mar 2024 14:15:38 +0000
ROA not after:            Fri 28 Feb 2025 14:20:38 +0000
asID:                     52861
IP address blocks:        177.93.144.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:eb:4a:2d:40:84:80:68:b5:ca:56:2a:ad:60:d2:49:6b:b4:57:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836BA4893066A2B7B112A0DB316F1611FD005A58
        Validity
            Not Before: Mar  1 14:15:38 2024 GMT
            Not After : Feb 28 14:20:38 2025 GMT
        Subject: CN=1B36BD6CFC1ADC38416ED59C67C0DF5CDF0B0A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:64:58:5c:73:02:a8:8c:ea:5e:d6:d1:43:a5:
                    69:c9:b8:a9:42:2a:a1:5b:63:b0:e6:d5:d9:2d:41:
                    4a:7f:2a:f9:99:c7:c2:96:14:f7:21:44:45:67:71:
                    6e:6c:b2:c7:de:96:03:3e:2f:d0:20:02:33:07:b9:
                    97:c7:98:24:71:9c:82:b4:37:d7:40:bf:89:f8:02:
                    63:00:ea:bb:aa:35:90:a4:d4:f0:a4:60:ba:12:20:
                    35:d8:5c:fd:94:af:3b:cc:03:d1:0c:61:a6:27:c7:
                    51:f5:32:c7:2c:61:cc:a5:e6:4c:9a:9c:28:be:0b:
                    26:df:de:a4:2c:64:19:c5:b3:eb:c1:5a:19:39:d1:
                    e9:de:57:a2:99:7b:db:4d:b4:5c:ec:6a:67:95:63:
                    59:c1:9f:a5:7d:15:4c:7f:b3:7a:c7:16:df:2b:22:
                    ad:54:91:b9:ee:dc:e8:43:1d:5e:fb:82:e2:4e:ac:
                    fc:5e:8b:38:03:99:fc:44:9d:d5:dd:88:1e:bf:9d:
                    43:ff:ce:c5:80:aa:ee:28:26:a0:49:55:69:91:3f:
                    f5:b2:51:14:bb:b7:87:e7:4b:3a:90:df:1d:fe:3a:
                    aa:dd:8b:50:15:41:d2:d3:9c:7e:8c:96:6c:0f:10:
                    94:28:ae:13:fe:b9:17:51:d4:22:ae:ee:0f:5d:f1:
                    7b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:36:BD:6C:FC:1A:DC:38:41:6E:D5:9C:67:C0:DF:5C:DF:0B:0A:5D
            X509v3 Authority Key Identifier:
                keyid:83:6B:A4:89:30:66:A2:B7:B1:12:A0:DB:31:6F:16:11:FD:00:5A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/836BA4893066A2B7B112A0DB316F1611FD005A58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/836BA4893066A2B7B112A0DB316F1611FD005A58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134342e302f32312d3231203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:97:a7:e0:91:9a:02:fe:4b:0f:75:a7:ca:05:87:29:7f:6d:
         41:71:59:c4:dd:6b:78:2f:eb:56:04:84:91:46:eb:7f:77:07:
         3e:17:1f:8a:59:d6:de:20:53:de:df:6a:d0:5e:cb:6b:17:e8:
         c7:ee:8f:d7:36:d9:44:36:f7:82:88:aa:bd:5a:ab:ed:72:ac:
         a4:74:aa:e0:9f:07:e3:9d:e0:d4:7b:cc:1d:ba:e1:77:78:31:
         12:d5:40:d1:3d:fd:cb:95:ec:58:43:5a:78:3d:ec:da:7c:72:
         ec:a3:db:b5:90:d0:23:a1:dd:76:2b:3d:09:da:15:79:16:d2:
         14:27:f2:02:3e:f9:bf:f6:b2:a1:43:74:0c:fe:51:61:b2:08:
         3e:b6:26:62:9c:ac:aa:cd:14:49:82:bd:14:e5:ad:01:1f:97:
         fb:84:92:3c:68:a4:25:0a:da:a6:be:33:6f:83:70:11:f0:60:
         7c:e0:24:ba:5d:1d:c9:fb:75:6a:9a:7e:1a:48:cc:f1:c1:98:
         e3:8c:1e:b7:9a:9a:ba:3f:f7:f9:da:79:d2:81:4d:37:7e:3e:
         99:41:f8:f8:5b:70:12:e3:f5:14:a1:1c:8e:b7:ee:1b:8a:3a:
         21:6d:f3:92:af:44:c6:07:b7:43:e7:81:19:cb:5c:2e:2b:fa:
         73:f0:2d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org